Lucene search

CVE-2020-5846

🗓️ 06 Jan 2020 21:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 111 Views🌐 WEB

Ahsay Cloud Backup Suite 8.3.0.30 insecure file upload and code execution issu

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2020-5846	6 Jan 202020:11	–	cvelist
RedhatCVE	CVE-2020-5846	22 May 202517:43	–	redhatcve
Prion	Design/Logic Flaw	6 Jan 202021:15	–	prion
NVD	CVE-2020-5846	6 Jan 202021:15	–	nvd

Nvd

Node

ahsay cloud_backup_suiteMatch8.3.0.30

Source	Link
wbsec	www.wbsec.nl/ahsay-2/

Parameter	Position	Path	Description	CWE
X-RSW-custom-encode-path	header	/obs/obm7/file/upload	Insecure file upload allows code execution via crafted HTTP request.	CWE-434

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jan 2020 21:15Current

8.6High risk

Vulners AI Score8.6

CVSS24

CVSS38.8

EPSS0.00799

CWE-434